Who operates Synvaro
The operator and data controller for the service in Türkiye is ISIS TURİZM HİJYEN DANIŞMANLIK ÇEVRE SAĞLIĞI ve TİC. LTD.ŞTİ. Synvaro and Qos are its brands in Türkiye.
Registered address: Bahçelievler Mah. Antalya Cad. No:75/7-8, 07600 Manavgat/Antalya, Türkiye. Privacy and product contact: ccakar@spexop.com. Company website: ISIS Türkiye.
If another organization independently hosts Synvaro, that organization controls its installation and must provide its own privacy notice. The Synvaro project does not automatically receive that installation’s data.
Information processed and why
- Account and access information, such as email, profile details, organization membership, roles and session records, to authenticate users and restrict access to their workspaces.
- Brand profiles, source documents, selected website content, drafts, images, audio, video and prompts supplied by users, to prepare, review and manage content.
- Connected social account identifiers, names, account or Page metadata, permissions and authorization tokens, to identify the selected account and perform authorized operations.
- Approval records, schedules, publication identifiers, results, provider request identifiers, usage and diagnostic records, to execute requested work, display history and investigate failures.
- Technical request data processed by hosting infrastructure, including IP addresses and request timestamps, to deliver and protect the service.
We process information to provide the service you request, administer accounts, protect the service and meet applicable legal obligations. Where consent is required for an optional integration or processing activity, we request it. A platform authorization does not authorize unrelated use of your data.
Social accounts and publishing
Connecting an account uses the provider’s authorization flow. Synvaro uses the granted permissions to discover eligible accounts and, when you authorize it, publish or manage content. LinkedIn Page access is limited to Pages for which the connected user has the required role. We do not request your social-platform password.
Content is sent to a social platform only through an approved publication or management action. An approved schedule authorizes execution of that content at the selected time. Public posts and their media become visible under the destination platform’s rules.
Synvaro uses YouTube API Services when you enable its YouTube integration. See the YouTube Terms of Service, Google Privacy Policy and LinkedIn Privacy Policyfor those providers’ practices.
AI providers and other recipients
When you request AI assistance, the selected provider receives the prompt and the relevant brand context or source material needed for that task. Depending on enabled features, providers may include OpenAI, Google, Anthropic, ElevenLabs, Mistral, Groq or fal.ai. Authorized background website processing may also send relevant context to the selected provider. You can disable that permission.
Provider retention and training practices depend on the provider, account and settings; we do not promise that all third-party processing has zero retention. fal.ai output URLs may be accessible to anyone who possesses the URL until the provider expires it. Avoid submitting information you are not authorized to share.
Hosting and infrastructure providers process data needed to run the service. Social platforms receive the content and API requests you authorize. Data may be processed outside Türkiye depending on the selected service and its infrastructure, subject to applicable transfer requirements. We do not sell personal information or use connected-account data for advertising brokerage.
Security, cookies and storage
Synvaro uses access controls and application-level encryption for stored social tokens and personal AI API keys. Authentication uses necessary session cookies. The public information site stores your theme preference in your browser. These measures reduce risk but cannot guarantee absolute security.
Saved workspace content and operational history are retained while needed to provide the workspace, preserve requested publication history, investigate failures or satisfy applicable obligations. Disconnecting an integration removes its active credentials from Synvaro, but does not automatically delete saved content, publication history, backups or posts already on the platform. Deletion requests are reviewed against those needs; any applicable retention restriction will be explained in our response.
Your choices and deletion requests
You can disconnect social accounts and personal AI credentials in Synvaro. Provider-side revocation is a separate action when it cannot be confirmed by Synvaro. For Google and YouTube, you can also revoke access through your Google account permissions. For LinkedIn and other services, use their connected-app settings. Revoking access does not itself remove an already published post.
To request access, correction or deletion of your personal data, withdraw consent, or raise a privacy concern, email ccakar@spexop.com with the subject “Synvaro privacy request” and identify the relevant account or workspace. Do not send passwords, API keys or authorization tokens. We may need to verify your identity before acting. You may also exercise the rights available under applicable data protection law and contact the competent supervisory authority.
Changes to this notice
We will update this page and its date when our practices change. Material changes requiring notice or consent will be communicated through the service or the account contact channel as appropriate.